AWS SOA真题 No.1-100

正确答案: B
Amazon Simple Queue Service (SQS) is a fast, reliable, scalable, and fully managed message queuing service. SQS provides a simple and cost-effective way to decouple the components of an application. The user can configure SQS, which will decouple the call between the EC2 application and S3. Thus, the application does not keep waiting for S3 to provide the data.,Reference: http://aws.amazon.com/sqs/faqs/

正确答案: B

Amazon Simple Queue Service (SQS) 是一个快速、可靠、可扩展且完全托管的消息队列服务。 SQS 提供了一种简单且具有成本效益的方法来解耦应用程序的组件。用户可以配置 SQS，这将解耦 EC2 应用程序与 S3 之间的调用。这样，应用程序就无需一直等待 S3 提供数据。

参考: http://aws.amazon.com/sqs/faqs/

正确答案: C
A user can create an EBS volume either from a snapshot or as a blank volume. If the volume is from a snapshot it will not be blank. The volume shows the right size only as long as it is mounted. This shows that the file system is created. When the user is accessing the volume the AWS EBS will wipe out the block storage or instantiate from the snapshot. Thus, the volume will show a loss of IOPS. It is recommended that the user should pre warm the EBS before use to achieve better IO.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-prewarm.html

正确答案: C

用户可以从快照创建 EBS 卷，或创建一个空白卷。如果该卷来自快照，它将不会是空白的。卷显示的正确大小仅在挂载时有效。这表明文件系统已创建。当用户访问卷时，AWS EBS 将清除块存储或从快照实例化。因此，卷将显示 IOPS 的损失。建议用户在使用之前预热 EBS，以获得更好的 IO。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-prewarm.html

正确答案: C
A Virtual Private Cloud (VPC) is a virtual network dedicated to a user’s AWS account. A subnet is a range of IP addresses in the VPC. The user can launch the AWS resources into a subnet. There are two supported platforms into which a user can launch instances: EC2-Classic and EC2-VPC (default subnet). A default VPC has all the benefits of EC2-VPC and the ease of use of EC2-Classic. Each instance that the user launches into a default subnet has a private IP address and a public IP address. These instances can communicate with the internet through an internet gateway. An internet gateway enables the EC2 instances to connect to the internet through the Amazon EC2 network edge.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Introduction.html

正确答案: C

虚拟私有云 (VPC) 是专门为用户的 AWS 账户创建的虚拟网络。子网是 VPC 中一系列的 IP 地址。用户可以将 AWS 资源启动到子网中。用户可以将实例启动到两个支持的平台：EC2-Classic 和 EC2-VPC（默认子网）。默认 VPC 具有 EC2-VPC 的所有好处以及 EC2-Classic 的易用性。用户在默认子网中启动的每个实例都有一个私有 IP 地址和一个公共 IP 地址。这些实例可以通过互联网网关与互联网通信。互联网网关使 EC2 实例能够通过 Amazon EC2 网络边缘连接到互联网。

参考: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Introduction.html

正确答案: B
When the user creates a subnet in VPC, he specifies the CIDR block for the subnet. The CIDR block of a subnet can be the same as the CIDR block for the VPC (for a single subnet in the VPC), or a subset (to enable multiple subnets). If the user creates more than one subnet in a VPC, the CIDR blocks of the subnets must not overlap. Thus, in this case the user has created a VPC with the CIDR block 20.0.0.0/24, which supports 256 IP addresses (20.0.0.0 to 20.0.0.255). The user can break this CIDR block into two subnets, each supporting 128 IP addresses. One subnet uses the CIDR block 20.0.0.0/25 (for addresses 20.0.0.0 – 20.0.0.127) and the other uses the CIDR block 20.0.0.128/25 (for addresses 20.0.0.128 – 20.0.0.255).,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: B

当用户在VPC中创建子网时，他为子网指定CIDR块。子网的CIDR块可以与VPC的CIDR块相同（对于VPC中的单个子网），也可以是一个子集（以支持多个子网）。如果用户在VPC中创建多个子网，则这些子网的CIDR块不得重叠。因此，在这种情况下，用户创建了一个CIDR块为20.0.0.0/24的VPC，这支持256个IP地址（20.0.0.0到20.0.0.255）。用户可以将此CIDR块分成两个子网，每个子网支持128个IP地址。一个子网使用CIDR块20.0.0.0/25（地址为20.0.0.0 – 20.0.0.127），另一个则使用CIDR块20.0.0.128/25（地址为20.0.0.128 – 20.0.0.255）。

参考: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: A
When the user creates a subnet in VPC, he specifies the CIDR block for the subnet. In this case the user has created a VPC with the CIDR block 20.0.0.0/24, which supports 256 IP addresses (20.0.0.0 to 20.0.0.255). The public subnet will have IP addresses between 20.0.0.0 – 20.0.0.127 and the private subnet will have IP addresses between 20.0.0.128 – 20.0.0.255. AWS reserves the first four IP addresses and the last IP address in each subnet’s CIDR block. These are not available for the user to use. Thus, the instance cannot have an IP address of 20.0.0.255.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: A

当用户在 VPC 中创建子网时，他需要指定子网的 CIDR 块。在这种情况下，用户创建了一个 CIDR 块为 20.0.0.0/24 的 VPC，该块支持 256 个 IP 地址（20.0.0.0 到 20.0.0.255）。公有子网的 IP 地址范围为 20.0.0.0 – 20.0.0.127，而私有子网的 IP 地址范围为 20.0.0.128 – 20.0.0.255。AWS 为每个子网的 CIDR 块保留了前四个 IP 地址和最后一个 IP 地址。这些 IP 地址用户无法使用。因此，实例不能拥有 20.0.0.255 的 IP 地址。

参考文献: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: A
Each AWS region has multiple, isolated locations known as Availability Zones. To ensure that the AWS resources are distributed across the Availability Zones for a region, AWS independently maps the Availability Zones to identifiers for each account. In this case the Availability Zone US-East-1a where George’s EC2 instances are running might not be the same location as the US-East-1a zone of Ray’s EC2 instances. There is no way for the user to coordinate the Availability Zones between accounts.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

正确答案: A
每个 AWS 区域都有多个独立的位置，称为可用区。为了确保 AWS 资源在区域的可用区之间分布，AWS 会独立地将可用区映射到每个账户的标识符。在这种情况下，乔治的 EC2 实例所运行的可用区 US-East-1a 可能与雷的 EC2 实例的 US-East-1a 区域不是同一个位置。用户无法协调账户之间的可用区。
参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

正确答案: C
When launching an instance with EC2, AWS recommends not to select the availability zone (AZ). AWS specifies that the default Availability Zone should be accepted. This is because it enables AWS to select the best Availability Zone based on the system health and available capacity. If the user launches additional instances, only then an Availability Zone should be specified. This is to specify the same or different AZ from the running instances.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

正确答案: C
在使用EC2启动实例时，AWS建议不要选择可用区（AZ）。AWS规定应接受默认可用区。这是因为这样可以让AWS根据系统健康状况和可用容量选择最佳可用区。如果用户启动额外的实例，只有在这种情况下才应该指定可用区。这是为了指定与正在运行的实例相同或不同的可用区。
参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

正确答案: B
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. A user can create a subnet with VPC and launch instances inside that subnet. When an instance is launched it will have a network interface attached with it. The user cannot delete the subnet until he terminates the instance and deletes the network interface.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: B
虚拟私有云（VPC）是一个专门为用户的AWS账户创建的虚拟网络。用户可以在VPC中创建子网，并在该子网内启动实例。当实例被启动时，它将有一个附加的网络接口。用户无法删除子网，直到他终止实例并删除网络接口。
参考: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: C
Amazon RDS provides high availability and failover support for DB instances using Multi-AZ deployments. In a Multi-AZ deployment, Amazon RDS automatically provisions and maintains a synchronous standby replica in a different Availability Zone. The primary DB instance is synchronously replicated across Availability Zones to a standby replica to provide data redundancy, eliminate I/O freezes, and minimize latency spikes during system backups. Running a DB instance with high availability can enhance availability during planned system maintenance, and help protect your databases against DB instance failure and Availability Zone disruption.,Note that the high-availability feature is not a scaling solution for read-only scenarios; you cannot use a standby replica to serve read traffic. To service read-only traffic, you should use a read replica.,Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.MultiAZ.html

正确答案: C

Amazon RDS 提供对 DB 实例的高可用性和故障转移支持，采用多可用区部署。在多可用区部署中，Amazon RDS 自动配置并维护一个位于不同可用区的同步备用副本。主 DB 实例在可用区之间同步复制到备用副本，以提供数据冗余，消除 I/O 冻结，并在系统备份期间尽量减少延迟峰值。运行具有高可用性的 DB 实例可以在计划的系统维护期间增强可用性，并有助于保护您的数据库免受 DB 实例故障和可用区中断的影响。

请注意，高可用性功能并不是针对只读场景的扩展解决方案；您不能使用备用副本来处理读流量。要处理只读流量，您应该使用只读副本。

参考: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.MultiAZ.html

正确答案: A
SQS allows the user to move data between distributed components of applications so they can perform different tasks without losing messages or requiring each component to be always available. The user can delete a queue at any time, whether it is empty or not. It is important to,note that queues retain messages for a set period of time. By default, a queue retains messages for four days.,Reference:,http://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/SQSConcepts.html

正确答案: A

SQS允许用户在应用程序的分布式组件之间移动数据，以便它们可以执行不同的任务，而不会丢失消息或要求每个组件始终可用。用户可以在任何时候删除队列，无论它是否为空。重要的是要注意，队列会保留消息一段设定的时间。默认情况下，队列会保留消息四天。

参考: http://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/SQSConcepts.html

正确答案: D
A Provisioned IOPS (SSD) volume can range in size from 4 GiB to 16 TiB and you can provision up to 20,000 IOPS per volume.,Reference:,http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html#EBSVolumeTypes_piops

正确答案: D

A Provisioned IOPS (SSD) volume can range in size from 4 GiB to 16 TiB and you can provision up to 20,000 IOPS per volume.

参考:

http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html#EBSVolumeTypes_piops

正确答案: D
The user can create subnets as per the requirement within a VPC. If the user wants to connect VPC from his own data centre, he can setup a public and VPN only subnet which uses hardware VPN access to connect with his data centre. When the user has configured this setup with Wizard, it will create a virtual private gateway to route all traffic of the VPN subnet. If the user has setup a NAT instance to route all the internet requests then all requests to the internet should be routed to it. All requests to the organization’s DC will be routed to the VPN gateway. Here are the valid entries for the main route table in this scenario:,Destination: 0.0.0.0/0 & Target: i-12345 (To route all internet traffic to the NAT Instance),Destination: 172.28.0.0/12 & Target: vgw-12345 (To route all the organization’s data centre traffic to the VPN gateway),Destination: 20.0.0.0/16 & Target: local (To allow local routing in VPC),Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario3.html

正确答案: D

用户可以根据需要在 VPC 中创建子网。如果用户希望从自己的数据中心连接 VPC，他可以设置一个公共和 VPN 仅限子网，该子网使用硬件 VPN 访问与数据中心连接。当用户使用向导配置此设置时，它将创建一个虚拟私人网关以路由所有 VPN 子网的流量。如果用户设置了 NAT 实例来路由所有互联网请求，则所有对互联网的请求应路由到它。对组织数据中心的所有请求将被路由到 VPN 网关。

在这种情况下，主路由表的有效条目如下：

• 目标: 0.0.0.0/0 & 目标: i-12345 (将所有互联网流量路由到 NAT 实例)
• 目标: 172.28.0.0/12 & 目标: vgw-12345 (将所有组织的数据中心流量路由到 VPN 网关)
• 目标: 20.0.0.0/16 & 目标: local (允许在 VPC 中进行本地路由)

参考: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario3.html

正确答案: D
AWS CloudWatch supports the custom metrics. The user can always capture the custom data and upload the data to CloudWatch using CLI or APIs. The user can publish the data to CloudWatch as single data points or as an aggregated set of data points called a statistic set. The user has to always include the namespace as part of the request. The user can supply a file instead of the metric name. If the user does not supply the timezone, it accepts the current time. If the user is sending the data as a single data point it will have parameters, such as value. However, if the user is sending as an aggregate it will have parameters, such as statistic-values.,Reference: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/PublishMetrics.html

正确答案: D

AWS CloudWatch 支持自定义指标。用户可以始终捕获自定义数据，并使用 CLI 或 API 将数据上传至 CloudWatch。用户可以将数据作为单个数据点或作为称为统计集的汇总数据点发布到 CloudWatch。用户必须始终将命名空间作为请求的一部分包含在内。用户可以提供一个文件来替代指标名称。如果用户未提供时区，则接受当前时间。如果用户将数据作为单个数据点发送，则将具有诸如值等参数。然而，如果用户以汇总形式发送，则将具有诸如统计值等参数。

参考: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/PublishMetrics.html

正确答案: A
The user can view, download, and watch the database logs using the Amazon RDS console, the Command Line Interface (CLI) or the Amazon RDS API. For the MySQL RDS, the user can view the error log, slow query log, and general logs. The user can also view the MySQL logs easily by directing the logs to a database table in the main database and querying that table.,Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html

正确答案: A

用户可以通过 Amazon RDS 控制台、命令行接口 (CLI) 或 Amazon RDS API 查看、下载和观看数据库日志。对于 MySQL RDS，用户可以查看错误日志、慢查询日志和常规日志。用户还可以通过将日志定向到主数据库中的数据库表并查询该表，轻松查看 MySQL 日志。

参考: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html

正确答案: C
Auto Scaling keeps checking the health of the instances at regular intervals and marks the instance for replacement when it is unhealthy. The ReplaceUnhealthy process terminates instances which are marked as unhealthy and subsequently creates new instances to replace them. This process first terminates the instance and then launches a new instance.,Reference: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/US_SuspendResume.html

正确答案: C
Auto Scaling会定期检查实例的健康状态，并在实例不健康时标记该实例以进行替换。
ReplaceUnhealthy过程终止标记为不健康的实例，并随后创建新实例来替换它们。
该过程首先终止实例，然后启动新的实例。
参考: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/US_SuspendResume.html

正确答案: A
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. If the CFO wants to allow only AWS usage report page access, the policy for that IAM user will be as given below:,{,“Version”: “2012-10-17”,,“Statement”: [,{,“Effect”: “Allow”,,“Action”: [,“aws-portal:ViewUsage”,],,“Resource”: “*”,},],},Reference: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/billing-permissions-ref.html

正确答案: A

AWS 身份与访问管理是一项网络服务，允许组织管理用户及其对各种 AWS 服务的权限。如果首席财务官想只允许访问 AWS 使用报告页面，该 IAM 用户的策略如下所示：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "aws-portal:ViewUsage"
            ],
            "Resource": "*"
        }
    ]
}

参考: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/billing-permissions-ref.html

正确答案: D
AWS CloudTrail is a web service which will allow the user to monitor the calls made to the Amazon CloudWatch API for the organization’s account, including calls made by the AWS Management Console, Command Line Interface (CLI), and other services. When CloudTrail logging is turned on, CloudWatch will write log files into the Amazon S3 bucket, which is specified during the CloudTrail configuration.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/related_services.html

正确答案: D

AWS CloudTrail 是一个网络服务，允许用户监控对组织账户的 Amazon CloudWatch API 的调用，包括 AWS 管理控制台、命令行接口 (CLI) 和其他服务所做的调用。当 CloudTrail 日志记录开启时，CloudWatch 会将日志文件写入在 CloudTrail 配置期间指定的 Amazon S3 存储桶。

参考链接: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/related_services.html

正确答案: D
If the user is viewing the data inside the CloudWatch console, the console provides options to filter values either using the relative period, such as days/hours or using the Absolute tab where the user can provide data with a specific date and time. The console also provides the option to search using the local timezone under the time range caption in the console because the time range tab allows the user to change the time zone.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/modify_graph_date_time.html

正确答案: D

如果用户正在查看 CloudWatch 控制台中的数据，控制台提供了使用相对时间段（例如天/小时）过滤值的选项，或使用绝对选项卡，在该选项卡中用户可以提供具有特定日期和时间的数据。控制台还提供了在控制台的时间范围标题下使用本地时区进行搜索的选项，因为时间范围选项卡允许用户更改时区。

参考:

http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/modify_graph_date_time.html

正确答案: B
A Provisioned IOPS (SSD) volume can range in size from 4 GiB to 16 TiB and you can provision up to 20,000 IOPS per volume. The ratio of IOPS provisioned to the volume size requested should be a maximum of 30; for example, a volume with 3000 IOPS must be at least 100 GB.,Reference:,http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html#EBSVolumeTypes_piops

正确答案: B
可预置的 IOPS (SSD) 存储卷的大小范围为 4 GiB 至 16 TiB，您可以为每个存储卷预置最多 20,000 IOPS。
預置的 IOPS 与请求的存储卷大小的比率应最大为 30；例如，拥有 3000 IOPS 的存储卷必须至少为 100 GB。
参考：
http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumeTypes.html#EBSVolumeTypes_piops

正确答案: A
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. If an organization wants to setup read only access to EC2 for a particular user, they should mention the action in the IAM policy which entitles the user for Describe rights for EC2, CloudWatch, Auto Scaling and ELB. In the policy shown below, the user will have read only access for EC2 and EBS, CloudWatch and Auto Scaling. Since ELB is not mentioned as a part of the list, the user will not have access to ELB.,{,“Version”: “2012-10-17”,,“Statement”: [,{,“Effect”: “Allow”,,“Action”: “ec2:Describe*”,,“Resource”: “*”,},,{,“Effect”: “Allow”,,“Action”: [,“cloudwatch:ListMetrics”,,“cloudwatch:GetMetricStatistics”,,“cloudwatch:Describe*”,],,“Resource”: “*”,},,{,“Effect”: “Allow”,,“Action”: “autoscaling:Describe*”,,“Resource”: “*”,},],},Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/GSGHowToCreateAdminsGroup.html

正确答案: A

AWS身份与访问管理是一项网络服务，允许组织管理用户及其在各种AWS服务中的权限。如果一个组织希望为特定用户设置对EC2的只读访问权限，他们应在IAM策略中指定该操作，以授予用户对EC2、CloudWatch、自动扩展和ELB的描述权限。在下面显示的政策中，用户将对EC2和EBS、CloudWatch和自动扩展具有只读访问权限。由于ELB未被列为部分，用户将无法访问ELB。

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "ec2:Describe*",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "cloudwatch:ListMetrics",
        "cloudwatch:GetMetricStatistics",
        "cloudwatch:Describe*"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "autoscaling:Describe*",
      "Resource": "*"
    }
  ]
}

参考: http://docs.aws.amazon.com/IAM/latest/UserGuide/GSGHowToCreateAdminsGroup.html

正确答案: C
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. The IAM group allows the organization to specify permissions for a collection of users. With the below mentioned policy, it will allow the group full access (Admin) to all AWS services.,{,“Version”: “2012-10-17”,,“Statement”: [,{,“Effect”: “Allow”,,“Action”: “*”,,“Resource”: “*”,},],},Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/GSGHowToCreateAdminsGroup.html

正确答案: C

AWS身份与访问管理是一项网络服务，允许组织管理用户及其对各种AWS服务的权限。IAM组允许组织为一组用户指定权限。根据下面提到的策略，该组将被允许对所有AWS服务拥有完全访问权限（管理员）。

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": "*",
      "Resource": "*"
    }
  ]
}

参考: http://docs.aws.amazon.com/IAM/latest/UserGuide/GSGHowToCreateAdminsGroup.html

正确答案: D
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. A user can create a subnet with VPC and launch instances inside that subnet. If the user has created a public private subnet, the instances in the public subnet can receive inbound traffic directly,from the internet, whereas the instances in the private subnet cannot. If these subnets are created with Wizard, AWS will create a NAT instance of a smaller or higher size, respectively. The VPC has an implied router and the VPC wizard updates the main route table used with the private subnet, creates a custom route table and associates it with the public subnet.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html

正确答案: D

虚拟私有云（VPC）是专门为用户的AWS账户创建的虚拟网络。用户可以使用VPC创建一个子网，并在该子网内启动实例。如果用户创建了一个公共私有子网，则公共子网中的实例可以直接从互联网接收入站流量，而私有子网中的实例则无法接收。如果这些子网是通过向导创建的，AWS将分别创建一个较小或较大的NAT实例。VPC有一个隐含的路由器，VPC向导会更新与私有子网一起使用的主路由表，创建一个自定义路由表并将其与公共子网关联。

参考: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html

正确答案: D
Elastic Load Balancing uses a Secure Socket Layer (SSL) negotiation configuration which is known as a Security Policy. It is used to negotiate the SSL connections between a client and the load balancer. Elastic Load Balancing supports the following versions of the SSL protocol:,TLS 1.2,TLS 1.1,TLS 1.0,SSL 3.0,SSL 2.0,Reference:,http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-ssl-security-policy.html

正确答案: D

弹性负载均衡使用一种称为安全策略的安全套接字层 (SSL) 协商配置。它用于协商客户端与负载均衡器之间的 SSL 连接。

弹性负载均衡支持以下版本的 SSL 协议:

• TLS 1.2
• TLS 1.1
• TLS 1.0
• SSL 3.0
• SSL 2.0

参考: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-ssl-security-policy.html

正确答案: D
Elastic Load Balancing uses a Secure Socket Layer (SSL) negotiation configuration which is known as a Security Policy. It is used to negotiate the SSL connections between a client and the load balancer. When client is requesting ELB DNS over SSL and if the load balancer is configured to support the Server Order Preference, then the load balancer gets to select the first cipher in its list that matches any one of the ciphers in the client’s list. Server Order Preference ensures that the load balancer determines which cipher is used for the SSL connection.,Reference:,http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-ssl-security-policy.html

正确答案: D

弹性负载均衡使用一种称为安全策略的安全套接字层（SSL）协商配置。它用于协商客户端与负载均衡器之间的SSL连接。当客户端请求通过SSL访问ELB DNS时，如果负载均衡器配置为支持服务器优先顺序，则负载均衡器可以选择其列表中第一个与客户端列表中任意一个密码相匹配的密码。服务器优先顺序确保负载均衡器确定用于SSL连接的密码。

参考: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-ssl-security-policy.html

正确答案: A
AWS S3 supports client side or server side encryption to encrypt all data at rest. The server side encryption can either have the S3 supplied AES-256 encryption key or the user can send the key along with each API call to supply his own encryption key. Amazon S3 never stores the user’s encryption key. The user has to supply it for each encryption or decryption call.,Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.htm,l

正确答案: A
AWS S3 支持客户端或服务器端加密，以加密所有静态数据。
服务器端加密可以使用 S3 提供的 AES-256 加密密钥，或者用户可以在每个 API 调用中发送密钥以提供自己的加密密钥。
Amazon S3 从不存储用户的加密密钥。
用户必须在每次加密或解密调用时提供密钥。
参考: http://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.htm

正确答案: D
The Elastic Load Balancer connection draining feature causes the load balancer to stop sending new requests to the back-end instances when the instances are deregistering or become unhealthy, while ensuring that in-flight requests continue to be served.,Reference:,http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/config-conn-drain.html

正确答案: D

弹性负载均衡器的连接排空功能使得负载均衡器在后端实例注销或变为不健康时停止向后端实例发送新请求，同时确保正在处理中请求继续得到服务。

参考文献: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/config-conn-drain.html

正确答案: A
CloudWatch is used to monitor AWS as well as the custom services. It provides either basic or detailed monitoring for the supported AWS products. In basic monitoring, a service sends data points to CloudWatch every five minutes, while in detailed monitoring a service sends data points to CloudWatch every minute. Services, such as RDS, EC2, Auto Scaling, ELB, and Route 53 can provide the monitoring data every minute.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

正确答案: A

CloudWatch用于监控AWS及自定义服务。它为支持的AWS产品提供基本或详细的监控。在基本监控中，服务每五分钟向CloudWatch发送数据点，而在详细监控中，服务每分钟向CloudWatch发送数据点。服务，如RDS、EC2、自动扩展、ELB和Route 53，可以每分钟提供监控数据。

参考文献:

http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

正确答案: C
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. A user can create a subnet with VPC and launch instances inside that subnet. The user can create a subnet with the same size of VPC. However, he cannot create any other subnet since the CIDR of the second subnet will conflict with the first subnet.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: C

虚拟私有云 (VPC) 是专门为用户的 AWS 账户创建的虚拟网络。用户可以在 VPC 中创建子网，并在该子网内启动实例。用户可以创建与 VPC 相同大小的子网。然而，他不能创建其他子网，因为第二个子网的 CIDR 会与第一个子网发生冲突。

参考链接: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: D
AWS EBS supports encryption of the volume while creating new volumes. It also supports creating volumes from existing snapshots provided the snapshots are created from encrypted volumes. The data at rest, the I/O as well as all the snapshots of EBS will be encrypted. The encryption occurs on the servers that host the EC2 instances, providing encryption of data as it moves between the EC2 instances and EBS storage. EBS encryption is based on the AES-256 cryptographic algorithm, which is the industry standard.,Reference:,http://aws.amazon.com/about-aws/whats-new/2014/05/21/Amazon-EBS-encryption-now-available/

正确答案: D
AWS EBS支持在创建新卷时对卷进行加密。它还支持从现有快照创建卷，前提是这些快照是从加密卷创建的。静态数据、I/O 以及所有 EBS 的快照都将被加密。加密发生在托管 EC2 实例的服务器上，提供了在 EC2 实例和 EBS 存储之间移动时的数据加密。EBS 加密基于 AES-256 加密算法，这是行业标准。
参考:
http://aws.amazon.com/about-aws/whats-new/2014/05/21/Amazon-EBS-encryption-now-available/

正确答案: A
When the user has launched an EC2 instance from an instance store backed AMI and the admin team wants to create an AMI from it, the user needs to setup the AWS AMI or the API tools first. Once the tool is setup the user will need the following credentials:,AWS account ID;,AWS access and secret access key;,X.509 certificate with private key.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-an-ami-instance-store.html

正确答案: A

当用户从一个基于实例存储的AMI启动了EC2实例，并且管理员团队想要从中创建一个AMI时，用户需要先设置AWS AMI或API工具。一旦工具设置完成，用户将需要以下凭证：

• AWS帐户ID；
• AWS访问密钥和秘密访问密钥；
• X.509证书及其私钥。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-an-ami-instance-store.html

正确答案: D
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. A user can create a subnet with VPC and launch instances inside that subnet. If the user has created two subnets (one private and one public), they would need a Network Address Translation (NAT) instance with the elastic IP address. This enables the instances in the private subnet to send requests to the internet (for example, to perform software updates).,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html

正确答案: D

虚拟私有云 (VPC) 是专门为用户的 AWS 账户设立的虚拟网络。用户可以使用 VPC 创建子网并在该子网内启动实例。如果用户创建了两个子网（一个私有子网和一个公共子网），他们需要一个带有弹性 IP 地址的网络地址转换 (NAT) 实例。这使得私有子网中的实例能够向互联网发送请求（例如，进行软件更新）。

参考: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html

正确答案: A
CloudWatch is used to monitor AWS as well as the custom services. It provides either basic or detailed monitoring for the supported AWS products. In basic monitoring, a service sends data points to CloudWatch every five minutes, while in detailed monitoring a service sends data,points to CloudWatch every minute. Services, such as RDS, ELB, OpsWorks, and Route 53 can provide the monitoring data every minute without charging the user.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

正确答案: A

CloudWatch 用于监控 AWS 以及自定义服务。它为支持的 AWS 产品提供基本或详细的监控。在基本监控中，每五分钟服务会向 CloudWatch 发送数据点，而在详细监控中，服务每分钟向 CloudWatch 发送数据点。诸如 RDS、ELB、OpsWorks 和 Route 53 等服务可以每分钟提供监控数据，而不向用户收费。

参考: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/supported_services.html

正确答案: D
Elastic Load Balancing access logs capture detailed information for all the requests made to the load balancer. Elastic Load Balancing publishes a log file from each load balancer node at the interval that the user has specified. The load balancer can deliver multiple logs for the same period. Elastic Load Balancing creates log file names in the following format:,“{Bucket}/{Prefix}/AWSLogs/{AWS AccountID}/elasticloadbalancing/{Region}/{Year}/{Month}/{Day}/{AWS Account ID}_elasticloadbalancing_{Region}_{Load Balancer Name}_{End Time}_{Load Balancer IP}_{Random String}.log“,Reference:,http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/access-log-collection.html

正确答案: D

弹性负载均衡访问日志捕获了针对负载均衡器的所有请求的详细信息。弹性负载均衡会按照用户指定的时间间隔从每个负载均衡器节点发布日志文件。负载均衡器可以在相同的时间段内交付多个日志。弹性负载均衡按照以下格式创建日志文件名：“{Bucket}/{Prefix}/AWSLogs/{AWS AccountID}/elasticloadbalancing/{Region}/{Year}/{Month}/{Day}/{AWS Account ID}_elasticloadbalancing_{Region}_{Load Balancer Name}_{End Time}_{Load Balancer IP}_{Random String}.log”。

参考: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/access-log-collection.html

正确答案: D
Amazon CloudWatch aggregates statistics according to the period length that the user has specified while getting data from CloudWatch. The user can publish as many data points as he wants with the same or similar time stamps. CloudWatch aggregates them by the period length when the user calls get statistics about those data points. CloudWatch records the average (sum of all items divided by the number of items) of the values received for every 1-minute period, as well as the number of samples, maximum value, and minimum value for the same time period. CloudWatch will aggregate all the data which have time stamps within a one-minute period.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html

正确答案: D

Amazon CloudWatch 根据用户在获取 CloudWatch 数据时指定的周期长度聚合统计信息。用户可以发布任意数量的数据点，并且这些数据点可以具有相同或相似的时间戳。当用户调用获取有关这些数据点的统计信息时，CloudWatch 会按照周期长度对其进行聚合。CloudWatch 记录每一分钟时间段内接收到的值的平均值（所有项目之和除以项目数量），以及同一时间段内的样本数量、最大值和最小值。CloudWatch 将聚合所有在一分钟时间段内具有时间戳的数据。

参考资料: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/publishingMetrics.html

正确答案: B
The Elastic Load Balancer connection draining feature causes the load balancer to stop sending new requests to the back-end instances when the instances are deregistering or become unhealthy, while ensuring that in-flight requests continue to be served. The user can specify a maximum time of 3600 seconds (1 hour) for the load balancer to keep the connections alive,before reporting the instance as deregistered. If the user does not specify the maximum timeout period, by default, the load balancer will close the connections to the deregistering instance after 300 seconds.,Reference:,http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/config-conn-drain.html

正确答案: B
弹性负载均衡器的连接排空功能使得负载均衡器在实例注销或变为不健康时停止向后端实例发送新请求，同时确保正在进行的请求继续得到服务。用户可以指定负载均衡器保持连接活跃的最长时间为3600秒（1小时），在报告实例已注销之前。如果用户未指定最大超时时间，默认情况下，负载均衡器将在300秒后关闭与注销实例的连接。
参考文献: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/config-conn-drain.html

正确答案: C
A Virtual Private Cloud (VPC) is a virtual network dedicated to a user’s AWS account. A subnet is a range of IP addresses in the VPC. The user can launch the AWS resources into a subnet. There are two supported platforms into which a user can launch instances: EC2-Classic and EC2-VPC. When the user launches an instance which is not a part of the non-default subnet, it will only have a private IP assigned to it. The instances part of a subnet can communicate with each other but cannot communicate over the internet or to the AWS services, such as RDS / S3.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Introduction.html

正确答案: C

虚拟私有云（VPC）是专门为用户的AWS账号设计的虚拟网络。子网是VPC中的一系列IP地址。用户可以将AWS资源启动到一个子网中。用户可以启动实例的两个支持平台是：EC2-Classic和EC2-VPC。当用户启动一个不属于非默认子网的实例时，它将只分配一个私有IP。属于同一子网的实例可以相互通信，但无法通过互联网或与AWS服务（如RDS / S3）通信。

参考链接: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Introduction.html

正确答案: B
Amazon CloudWatch alarm watches a single metric over a time period that the user specifies and performs one or more actions based on the value of the metric relative to a given threshold over a number of time periods. The user can setup an action which terminates the instances when their CPU utilization is below a certain threshold for a certain period of time. The EC2 action can either terminate or stop the instance as part of the EC2 action.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/UsingAlarmActions.html

正确答案: B

Amazon CloudWatch警报监控用户指定的时间段内的单个指标，并根据该指标相对于给定阈值在多个时间段内的值执行一个或多个操作。用户可以设置一个操作，当实例的CPU利用率在一定时间段内低于某个阈值时终止实例。EC2操作可以作为EC2操作的一部分终止或停止实例。

参考文献:

http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/UsingAlarmActions.html

正确答案: D
Amazon RDS uses the Amazon Simple Notification Service to provide a notification when an Amazon RDS event occurs. These notifications can be in any notification form supported by Amazon SNS for an AWS region, such as an email, a text message or a call to an HTTP endpoint.,Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.html

正确答案: D

Amazon RDS 使用 Amazon Simple Notification Service 在发生 Amazon RDS 事件时提供通知。这些通知可以采用 Amazon SNS 支持的任何通知形式，具体取决于 AWS 区域，例如电子邮件、短信或 HTTP 端点的调用。

参考链接: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.html

正确答案: C
Amazon CloudWatch is basically a metrics repository. The AWS product puts metrics into this repository, and the user can retrieve the data or statistics based on those metrics. To distinguish the data for each service, the CloudWatch metric has a namespace. Namespaces are containers for metrics. All AWS services that provide the Amazon CloudWatch data use a namespace string, beginning with “AWS/”. All the services which are supported by CloudWatch will have some namespace. CloudWatch does not monitor CloudTrail. Thus, the namespace “AWS/CloudTrail” is incorrect.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/aws-namespaces.html

正确答案: C

Amazon CloudWatch 基本上是一个指标库。该 AWS 产品将指标放入该库中，用户可以根据这些指标检索数据或统计信息。为了区分每个服务的数据，CloudWatch 指标具有命名空间。命名空间是指标的容器。所有提供 Amazon CloudWatch 数据的 AWS 服务都使用一个以 “AWS/” 开头的命名空间字符串。所有由 CloudWatch 支持的服务将具有某个命名空间。CloudWatch 不监控 CloudTrail。因此，命名空间 “AWS/CloudTrail” 是不正确的。

参考资料:

http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/aws-namespaces.html

正确答案: B
When the user configures the launch configuration and the Auto Scaling group, the Auto Scaling group will start instances by launching the minimum number (or the desired number, if,specified) of EC2 instances. If there are no other scaling conditions attached to the Auto Scaling group, it will maintain the minimum number of running instances at all times.,Reference:,http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/as-maintain-instance-levels.html

正确答案: B
当用户配置启动配置和自动缩放组时，自动缩放组将通过启动最小数量（或指定的期望数量）的EC2实例来启动实例。如果没有其他缩放条件附加到自动缩放组，它将始终保持运行实例的最小数量。
参考：
http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/as-maintain-instance-levels.html

正确答案: A
When the user creates a new EBS volume or restores a volume from the snapshot, the back-end storage blocks are immediately allocated to the user EBS. However, the first time when the user is trying to access a block of the storage, it is recommended to either be wiped from the new volumes or instantiated from the snapshot (for restored volumes) before the user can access the block. This preliminary action takes time and can cause a 5 to 50 percent loss of IOPS for the volume when the block is accessed for the first time. To avoid this it is required to pre warm the volume. Pre-warming an EBS volume on a Linux instance requires that the user should unmount the blank device first and then write all the blocks on the device using a command, such as “dd”.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-prewarm.html

正确答案: A

当用户创建新的EBS卷或从快照恢复卷时，后端存储块会立即分配给用户的EBS。然而，首次尝试访问存储块时，建议在用户可以访问该块之前，先将其从新卷上清除或从快照中初始化（对于恢复的卷）。这个初步操作需要时间，并且在首次访问该块时可能会导致卷的IOPS损失5%到50%。为了避免这种情况，必须对卷进行预热。在Linux实例上预热EBS卷需要用户先卸载空白设备，然后使用如“dd”这样的命令写入设备上的所有块。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-prewarm.html

正确答案: B
When the user account has reached the maximum number of EC2 instances, it will not be allowed to launch an instance. AWS will throw an ‘InstanceLimitExceeded’ error. For all other reasons, such as “AMI is missing part”, “Corrupt Snapshot” or ”Volume limit has reached” it will launch an EC2 instance and then terminate it.,Reference:,http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_InstanceStraightToTerminated.html

正确答案: B

当用户账户达到最大 EC2 实例数量时，将不允许启动实例。AWS 将抛出一个 ‘InstanceLimitExceeded’ 错误。对于其他所有原因，例如 “AMI 缺少部分”、“快照损坏” 或 “卷限制已达到”，它将启动一个 EC2 实例，然后终止它。

参考内容:

http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_InstanceStraightToTerminated.html

正确答案: A
When the user deletes the Elastic Load Balancer, all the registered instances will be deregistered. However, they will continue to run. The user will incur charges if he does not take any action on those instances.,Reference:,http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/US_EndLoadBalancing02.html

正确答案: A
当用户删除弹性负载均衡器时，所有注册的实例将被注销。然而，它们将继续运行。如果用户对这些实例不采取任何行动，将会产生费用。
参考文献：
http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/US_EndLoadBalancing02.html

正确答案: C
The AWS Billing and Cost Management console includes the Cost Explorer tool for viewing AWS cost data as a graph. It does not charge extra to user for this service. With Cost Explorer the user can filter graphs using resource tags or with services in AWS. If the organization is using Consolidated Billing it helps generate report based on linked accounts. This will help organization to identify areas that require further inquiry. The organization can view trends and use that to understand spend and to predict future costs.,Reference: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/costexplorer.html

正确答案: C

AWS 账单和成本管理控制台包括成本探测器工具，用于以图表形式查看 AWS 成本数据。对此服务不会向用户收取额外费用。使用成本探测器，用户可以通过资源标签或 AWS 中的服务来过滤图表。如果组织使用合并账单，它有助于基于关联账户生成报告。这将帮助组织识别需要进一步调查的领域。组织可以查看趋势，并利用这些趋势来理解支出并预测未来成本。

参考: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/costexplorer.html

正确答案: D
Once the user has created a VPC, he cannot change the CIDR of that VPC. The user has to terminate all the instances, delete the subnets and then delete the VPC. Create a new VPC with a higher size and launch instances with the newly created VPC and subnets.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: D

一旦用户创建了一个VPC，他就不能更改该VPC的CIDR。用户必须终止所有实例，删除子网，然后删除VPC。创建一个更大规模的新VPC，并使用新创建的VPC和子网启动实例。

参考: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: D
A user can stop/start or reboot an EC2 instance using the AWS console, the Amazon EC2 CLI or the Amazon EC2 API. Rebooting an instance is equivalent to rebooting an operating system. When the instance is rebooted AWS will not charge the user for the extra hours. In case the user stops the instance, AWS does not charge the running cost but charges only the EBS storage cost. If the user starts and stops the instance multiple times in a single hour, AWS will charge the user for every start and stop. In this case, since the instance was rebooted twice, it will cost the user for 3 instance hours.,Reference:,http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-lifecycle.html#lifecycle-differences

正确答案: D

用户可以使用 AWS 控制台、Amazon EC2 CLI 或 Amazon EC2 API 停止/启动或重启 EC2 实例。重启实例相当于重启操作系统。当实例重启时，AWS 不会向用户收取额外的小时费用。如果用户停止实例，AWS 不会收取运行费用，只收取 EBS 存储费用。如果用户在一个小时内多次启动和停止实例，AWS 会对每次启动和停止收费。在这种情况下，由于实例重启了两次，因此用户将支付 3 小时的实例费用。

参考:

http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-lifecycle.html#lifecycle-differences

正确答案: B
Elastic Load Balancing uses a Secure Socket Layer (SSL) negotiation configuration which is known as a Security Policy. It is used to negotiate the SSL connections between a client and the load balancer. If the user has created an HTTPS/SSL listener without associating any security policy, Elastic Load Balancing will, by default, associate the latest version of the ELBSecurityPolicy-YYYY-MM with the load balancer.,Reference:,http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/ssl-config-update.html

正确答案: B

弹性负载均衡使用一种被称为安全策略的安全套接层（SSL）协商配置。它用于在客户端和负载均衡器之间协商SSL连接。如果用户创建了一个HTTPS/SSL监听器但没有关联任何安全策略，弹性负载均衡将默认与负载均衡器关联最新版本的ELBSecurityPolicy-YYYY-MM。

参考链接: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/ssl-config-update.html

正确答案: A
When the user has configured Transmission Control Protocol (TCP) or Secure Sockets Layer (SSL) for both front-end and back-end connections of the Elastic Load Balancer, the load balancer forwards the request to the back-end instances without modifying the request headers unless the proxy header is enabled. SSL does not support sticky sessions. If the user has enabled a proxy protocol it adds the source and destination IP to the header.,Reference:,http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/enable-proxy-protocol.html

正确答案: A

当用户为弹性负载均衡器的前端和后端连接配置传输控制协议 (TCP) 或安全套接层 (SSL) 时，负载均衡器将请求转发到后端实例，而不修改请求头，除非启用了代理头。SSL 不支持粘性会话。如果用户启用了代理协议，它会将源和目标 IP 添加到头部。

参考文献:

http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/enable-proxy-protocol.html

正确答案: A
In the event of a planned or unplanned outage of a DB instance, Amazon RDS automatically switches to a standby replica in another Availability Zone if the user has enabled Multi AZ. The automatic failover mechanism simply changes the DNS record of the DB instance to point to the standby DB instance. As a result, the user will need to re-establish any existing connections to the DB instance. However, as the DNS is the same, the application can access DB seamlessly.,Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.MultiAZ.html

正确答案: A
如果数据库实例发生计划内或计划外的停机，亚马逊 RDS 会自动切换到另一个可用区的备用副本，前提是用户已启用多可用区（Multi AZ）。自动故障转移机制仅仅是将数据库实例的 DNS 记录更改为指向备用数据库实例。因此，用户需要重新建立与数据库实例的任何现有连接。然而，由于 DNS 是相同的，应用程序可以无缝访问数据库。
参考: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.MultiAZ.html

正确答案: D
The user has created an Elastic Load Balancer with the availability zone and wants to add more zones to the existing ELB. The user can do so in two ways:,From the console or CLI, add new zones to ELB;,Launch instances in a separate AZ and add instances to the existing ELB.,Reference:,http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/enable-disable-az.html

正确答案: D

用户创建了一个弹性负载均衡器，并希望向现有的 ELB 添加更多可用区。用户可以通过两种方式实现这一点：

• 通过控制台或 CLI，将新可用区添加到 ELB；
• 在一个独立的可用区中启动实例，并将实例添加到现有的 ELB。

参考：

http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/enable-disable-az.html

正确答案: A
Amazon SQS can delete a queue without notification if one of the following actions hasn’t been performed on it for 30 consecutive days: SendMessage, ReceiveMessage, DeleteMessage, GetQueueAttributes, SetQueueAttributes, AddPermission, and RemovePermission.,Reference:,http://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/SQSConcepts.html

正确答案: A
Amazon SQS 可以在以下任一操作在队列上未执行 30 天后，自动删除该队列而不进行通知：SendMessage、ReceiveMessage、DeleteMessage、GetQueueAttributes、SetQueueAttributes、AddPermission 和 RemovePermission。
参考：
http://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/SQSConcepts.html

正确答案: D
When the application does not experience the expected IOPS or throughput of the PIOPS EBS volume that was provisioned, the possible root cause could be that the EC2 bandwidth is the limiting factor and the instance might not be either EBS-optimized or might not have 10 Gigabit,network connectivity. Another possible cause for not experiencing the expected IOPS could also be that the user is not driving enough I/O to the EBS volumes. The size of the volume may not affect IOPS.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-io-characteristics.html

正确答案: D

当应用程序未能达到预期的 PIOPS EBS 卷的 IOPS 或吞吐量时，可能的根本原因是 EC2 带宽是限制因素，而且实例可能既不是 EBS 优化的，也可能没有 10 Gigabit 的网络连接。未能达到预期 IOPS 的另一个可能原因也是用户没有为 EBS 卷驱动足够的 I/O。卷的大小可能不会影响 IOPS。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-io-characteristics.html

正确答案: D
The Auto Scaling group determines the health state of each instance periodically by checking the results of the Amazon EC2 instance status checks. If the instance status description shows any other state other than “running” or the system status description shows impaired, Auto Scaling considers the instance to be unhealthy. Thus, it terminates the instance and launches a replacement.,Reference:,http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/as-maintain-instance-levels.html

正确答案: D

自动缩放组通过定期检查Amazon EC2实例状态检查的结果来确定每个实例的健康状态。 如果实例状态描述显示任何其他状态，而不是“运行中”，或者系统状态描述显示受损，自动缩放将视该实例为不健康。因此，它将终止该实例并启动替换实例。

参考: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/as-maintain-instance-levels.html

正确答案: B
Auto Scaling allows the user to suspend and then resume one or more of the Auto Scaling processes in the Auto Scaling group. This is very useful when the user wants to investigate a configuration problem or some other issue, such as a memory leak with the web application and then make changes to the application, without triggering the Auto Scaling process.,Reference: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/US_SuspendResume.html

正确答案: B
自动扩展允许用户在自动扩展组中暂停然后恢复一个或多个自动扩展过程。当用户想要调查配置问题或其他问题（例如，网页应用程序的内存泄漏）并进行更改时，这非常有用，而无需触发自动扩展过程。
参考: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/US_SuspendResume.html

正确答案: C
When the user creates an EBS volume and is trying to access it for the first time it will encounter reduced IOPS due to wiping or initiating of the block storage. To avoid this as well as achieve the best performance it is required to pre warm the EBS volume. For a volume created from a snapshot and attached with a Linux OS, the “dd” command pre warms the existing data on EBS and any restored snapshots of volumes that have been previously fully pre warmed. This command maintains incremental snapshots; however, because this operation is read-only, it does not pre warm unused space that has never been written to on the original volume. In the command “dd if=/dev/xvdf of=/dev/null bs=1M” , the parameter “if=input file” should be set to the drive that the user wishes to warm. The “of=output file” parameter should be set to the Linux null virtual device, /dev/null. The “bs” parameter sets the block size of the read operation; for optimal performance, this should be set to 1 MB.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-prewarm.html

正确答案: C

当用户创建一个EBS卷并首次尝试访问时，可能会由于擦除或初始化块存储而遇到减少的IOPS。为了避免这种情况并实现最佳性能，必须预热EBS卷。对于从快照创建并附加有Linux操作系统的卷，“dd”命令预热EBS上的现有数据以及之前完全预热过的卷的任何恢复快照。该命令保持增量快照；然而，由于此操作是只读的，因此并不会预热从未在原始卷上写入的未使用空间。在命令“dd if=/dev/xvdf of=/dev/null bs=1M”中，参数“if=input file”应设置为用户希望预热的驱动器。“of=output file”参数应设置为Linux空虚拟设备，/dev/null。“bs”参数设置读取操作的块大小；为了达到最佳性能，应该设置为1 MB。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-prewarm.html

正确答案: A
Auto Scaling based on a schedule allows the user to scale the application in response to predictable load changes. The user can specify any date in the future to scale up or down during that period. As per Auto Scaling the user can schedule an action for up to a month in the future. Thus, it is recommended to wait until end of November before scheduling for Christmas.,Reference: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/schedule_time.html

正确答案: A

基于时间表的自动扩展允许用户根据可预测的负载变化来扩展应用程序。用户可以指定未来的任何日期，在该期间内进行扩展或缩减。根据自动扩展的规则，用户可以将操作安排在未来最多一个月。因此，建议在安排圣诞节的计划前，等到11月底。

参考: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/schedule_time.html

正确答案: B
A user can reboot an EC2 instance using the AWS console, the Amazon EC2 CLI or the Amazon EC2 API. Rebooting an instance is equivalent to rebooting an operating system. However, it is recommended that the user use the Amazon EC2 to reboot the instance instead of running the operating system reboot command from the instance. The instance remains on the same host,computer and maintains its public DNS name, private IP address, and any data on its instance store volumes. It typically takes a few minutes for the reboot to complete, but the time it takes to reboot depends on the instance configuration.,Reference:,http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-lifecycle.html#lifecycle-differences

正确答案: B

用户可以通过AWS控制台、Amazon EC2 CLI或Amazon EC2 API来重启EC2实例。重启实例相当于重启操作系统。然而，建议用户使用Amazon EC2来重启实例，而不是在实例中运行操作系统重启命令。实例保持在同一主机、计算机上，并保留其公共DNS名称、私有IP地址以及实例存储卷上的任何数据。重启完成通常需要几分钟，但重启所需的时间取决于实例配置。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-lifecycle.html#lifecycle-differences

正确答案: D
AWS provides cost allocation tags to categorize and track the AWS costs. When the user applies tags to his AWS resources, AWS generates a cost allocation report as a comma-separated value (CSV file) with the usage and costs aggregated by those tags. Each tag will have a key-value and can be applied to services, such as EC2, S3, RDS, EMR, etc. It is required that the key should be different for each tag. The value can be the same for different keys. In this case since the value is different, AWS will properly show the distribution report with the correct values.,Reference: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/allocation.html

正确答案: D

AWS提供成本分配标签，用于对AWS成本进行分类和跟踪。当用户将标签应用于其AWS资源时，AWS会生成一份以逗号分隔的值（CSV文件）的成本分配报告，该报告按这些标签聚合了使用情况和成本。每个标签都有一个键值对，可以应用于服务，例如EC2、S3、RDS、EMR等。要求每个标签的键必须不同。值可以对不同的键保持相同。在这种情况下，由于值不同，AWS将正确显示具有正确值的分布报告。

参考: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/allocation.html

正确答案: B
With AWS IAM a user is creating an application which runs on an EC2 instance and makes requests to AWS, such as DynamoDB or S3 calls. Here it is recommended that the user should not create an IAM user and pass the user’s credentials to the application or embed those credentials inside the application. If the user is creating an app that runs on a mobile phone and makes requests to AWS, the user should not create an IAM user and distribute the user’s access key with the app. Instead, he should use an identity provider, such as Login with Amazon, Facebook, or Google to authenticate the users, and then use that identity to get temporary security credentials.,Reference:,http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html

正确答案: B
使用AWS IAM，用户正在创建一个在EC2实例上运行并向AWS发出请求的应用程序，例如DynamoDB或S3调用。在这里，建议用户不要创建IAM用户并将用户的凭证传递给应用程序或将这些凭证嵌入应用程序中。如果用户正在创建一个在手机上运行并向AWS发出请求的应用程序，则用户不应创建IAM用户并与应用程序一起分发用户的访问密钥。相反，他应该使用身份提供者，例如通过亚马逊、Facebook或Google登录来验证用户，然后使用该身份获取临时安全凭证。
参考文献：http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html

正确答案: D
Auto Scaling based on a schedule allows the user to scale the application in response to predictable load changes. To configure the Auto Scaling group to scale based on a schedule, the user needs to create scheduled actions. A scheduled action tells Auto Scaling to perform a scaling action at a certain time in the future.,Reference: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/schedule_time.html

正确答案: D

基于计划的自动扩展允许用户根据可预测的负载变化对应用程序进行扩展。要配置自动扩展组以根据计划进行扩展，用户需要创建计划操作。计划操作指示自动扩展在未来的某个时间执行扩展操作。

参考: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/schedule_time.html

正确答案: C
Amazon RDS uses the Amazon Simple Notification Service to provide a notification when an Amazon RDS event occurs. Event categories for a snapshot source type include: Creation, Deletion, and Restoration. The Backup is a part of DB instance source type.,Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.html

正确答案: C

Amazon RDS使用Amazon简单通知服务在发生Amazon RDS事件时提供通知。

快照源类型的事件类别包括：创建、删除和恢复。

备份是数据库实例源类型的一部分。

参考链接: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.html

正确答案: A
A user can reboot an EC2 instance using the AWS console, the Amazon EC2 CLI or the Amazon EC2 API. Rebooting an instance is equivalent to rebooting an operating system. However, it is recommended that the user use Amazon EC2 to reboot the instance instead of running the,operating system reboot command from the instance. When an instance launched from an instance store backed AMI is rebooted all the ephermal storage data is still preserved.,Reference:,http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-lifecycle.html#lifecycle-differences

正确答案: A

用户可以使用 AWS 控制台、Amazon EC2 CLI 或 Amazon EC2 API 重启 EC2 实例。重启实例相当于重启操作系统。然而，建议用户使用 Amazon EC2 重启实例，而不是从实例中运行操作系统重启命令。当从实例存储支持的 AMI 启动的实例被重启时，所有的临时存储数据仍然会被保留。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-lifecycle.html#lifecycle-differences

正确答案: C
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. The IAM group allows the organization to specify permissions for a collection of users. With the below mentioned policy, it will allow the group full access to IAM management. The user part of this group will be able to create or manage the IAM users, groups or roles.,{,“Version”: “2012-10-17”,,“Statement”: [,{,“Effect”: “Allow”,,“Action”: “iam:*”,,“Resource”: “*”,},],},Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/GSGHowToCreateAdminsGroup.html

正确答案: C

AWS身份与访问管理是一项网络服务，允许组织管理用户及其对各种AWS服务的权限。

IAM组允许组织为一组用户指定权限。

根据下面提到的策略，将允许该组对IAM管理进行完全访问。

该组中的用户将能够创建或管理IAM用户、组或角色。

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "iam:*",
            "Resource": "*"
        }
    ]
}

参考: http://docs.aws.amazon.com/IAM/latest/UserGuide/GSGHowToCreateAdminsGroup.html

正确答案: D
Auto Scaling performs various processes, such as Launch, Terminate, add to Load Balancer etc. The user can also suspend the individual process. The AddToLoadBalancer process type adds instances to the load balancer when the instances are launched. If this process is suspended, Auto Scaling will launch the instances but will not add them to the load balancer. When the user resumes this process, Auto Scaling will resume adding new instances launched after resumption to the load balancer. However, it will not add running instances that were launched while the process was suspended; those instances must be added manually.,Reference: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/US_SuspendResume.html

正确答案: D

自动扩展执行各种过程，例如启动、终止、添加到负载均衡器等。用户也可以暂停单个过程。当实例启动时，AddToLoadBalancer过程类型会将实例添加到负载均衡器。如果此过程被暂停，自动扩展将启动实例，但不会将它们添加到负载均衡器。当用户恢复此过程时，自动扩展将继续将恢复后启动的新实例添加到负载均衡器。但是，它不会添加在过程暂停期间启动的运行实例；这些实例必须手动添加。

参考: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/US_SuspendResume.html

正确答案: B
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. Whenever the organization is creating an IAM user, there should be a unique ID for each user. The names of users, groups, roles, instance profiles must be alphanumeric, including the following common characters: plus (+), equal (=), comma (,), period (.), at (@), and dash (-).,Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_SettingUpUser.html

正确答案: B

AWS身份和访问管理是一项网络服务，允许组织管理用户及其对各种AWS服务的权限。当组织创建一个IAM用户时，每个用户都应该有一个唯一的ID。用户、组、角色、实例配置文件的名称必须是字母数字的，包括以下常见字符：加号（+）、等号（=）、逗号（,）、句点（.）、 at符号（@）和短横线（-）。

参考链接: http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_SettingUpUser.html

正确答案: B
Auto Scaling performs various processes, such as Launch, Terminate Alarm Notification etc. The user can also suspend individual process. The AlarmNotification process type accepts notifications from the Amazon CloudWatch alarms that are associated with the Auto Scaling group. If the user suspends this process type, Auto Scaling will not automatically execute the scaling policies that would be triggered by the alarms.,Reference: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/US_SuspendResume.html

正确答案: B

自动扩展执行各种过程，例如启动、终止报警通知等。用户也可以暂停单个过程。报警通知过程类型接受来自与自动扩展组关联的 Amazon CloudWatch 报警的通知。如果用户暂停此过程类型，自动扩展将不会自动执行由报警触发的扩展策略。

参考: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/US_SuspendResume.html

正确答案: D
An S3 bucket ACL grantee can be an AWS account or one of the predefined Amazon S3 groups. Amazon S3 has a set of predefined groups. When granting account access to a group, the user can specify one of the URLs of that group instead of a canonical user ID. AWS S3 has the following predefined groups:,Authenticated Users group: It represents all AWS accounts.,All Users group: Access permission to this group allows anyone to access the resource.,Log Delivery group: WRITE permission on a bucket enables this group to write server access logs to the bucket.,Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html

正确答案: D
S3 桶的 ACL 授权人可以是 AWS 账户或其中一个预定义的 Amazon S3 组。Amazon S3 有一组预定义的组。当授予账户访问某个组时，用户可以指定该组的其中一个 URL，而不是规范用户 ID。AWS S3 具有以下预定义组：
已认证用户组：表示所有 AWS 账户。
所有用户组：对该组的访问权限允许任何人访问资源。
日志交付组：对桶的写入权限使该组能够将服务器访问日志写入桶中。
参考：http://docs.aws.amazon.com/AmazonS3/latest/dev/acl-overview.html

正确答案: D
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. The user is managing an AWS account for an organization that already has an identity system, such as the login system for the corporate network (SSO). In this case, instead of creating individual IAM users or groups for each user who need AWS access, it may be more practical to use a proxy server to translate the user identities from the organization network into the temporary AWS security credentials. This proxy server will attach an IAM role to the user after authentication.,Reference:,http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html

正确答案: D

AWS 身份与访问管理是一个网络服务，允许组织管理用户及其对各种 AWS 服务的权限。用户正在为一个已经拥有身份系统的组织管理 AWS 账户，例如企业网络的登录系统（SSO）。在这种情况下，不必为每个需要 AWS 访问的用户单独创建 IAM 用户或组，使用代理服务器将组织网络中的用户身份转换为临时 AWS 安全凭证可能更实用。该代理服务器将在身份验证后为用户附加 IAM 角色。

参考：

http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html

正确答案: A
AWS Identity and Access Management is a web service which allows organizations to manage users and user permissions for various AWS services. AWS DynamoDB has only tables and the organization cannot make separate databases. The organization should create a table with the same name as the IAM user name and use the ARN of DynamoDB as part of the group policy. The sample policy is shown below:,{,“Version”: “2012-10-17”,,“Statement”: [{,“Effect”: “Allow”,,“Action”: [“dynamodb:*”],,“Resource”: “arn:aws:dynamodb:region:account-number-without-hyphens:table/${aws:username}”,},],},Reference: http://docs.aws.amazon.com/IAM/latest/UserGuide/ExampleIAMPolicies.html

正确答案: A

AWS 身份和访问管理是一项网络服务，允许组织管理用户及其在各种 AWS 服务中的权限。AWS DynamoDB 只有表，组织无法创建单独的数据库。组织应该创建一个与 IAM 用户名相同的表，并将 DynamoDB 的 ARN 作为组策略的一部分。示例策略如下：

{
    “Version”: “2012-10-17”,
    “Statement”: [{
        “Effect”: “Allow”,
        “Action”: [“dynamodb:*”],
        “Resource”: “arn:aws:dynamodb:region:account-number-without-hyphens:table/${aws:username}”
    }]
}

参考: http://docs.aws.amazon.com/IAM/latest/UserGuide/ExampleIAMPolicies.html

正确答案: C
With AWS EC2, when a user is launching an instance he can select the availability zone (AZ) at the time of launch. If the zone is not selected, AWS selects it on behalf of the user. Once the instance is launched, the user cannot change the zone of that instance unless he creates an AMI of that instance and launches a new instance from it.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

正确答案: C

在 AWS EC2 中，当用户启动一个实例时，他可以在启动时选择可用区 (AZ)。如果未选择可用区，AWS 将代用户选择。一旦实例启动，用户无法更改该实例的可用区，除非他创建该实例的 AMI 并从中启动一个新实例。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html

正确答案: A
Amazon S3 stores objects according to their storage class. There are three major storage classes: Standard, Reduced Redundancy Storage and Glacier. Standard is for AWS S3 and provides very high durability. However, the costs are a little higher. Glacier is for archival and the files are not available over the internet. Reduced Redundancy Storage is for less critical files. Reduced Redundancy is little cheaper as it provides less durability in comparison to S3. In this case since the log files are not mission critical files, RRS will be a better option.,Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingRRS.html

正确答案: A

Amazon S3 根据其存储类别存储对象。主要有三种存储类别：标准、降低冗余存储和冰川。标准用于 AWS S3，并提供非常高的耐用性。 然而，成本稍高。冰川用于归档，文件无法通过互联网访问。降低冗余存储适用于不太关键的文件。降低冗余存储的成本稍低，因为与 S3 相比，它提供的耐用性较低。在这种情况下，由于日志文件不是关键任务文件，因此 RRS 将是更好的选择。

参考文献: http://docs.aws.amazon.com/AmazonS3/latest/dev/UsingRRS.html

正确答案: A
Within EC2, when the user copies an AMI, the new AMI is fully independent of the source AMI; there is no link to the original (source) AMI. AWS does not copy launch the permissions, user-defined tags or the Amazon S3 bucket permissions from the source AMI to the new AMI. Thus, in this case by default Stefano will not have access to the AMI in the US West region.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/CopyingAMIs.html

正确答案: A
在 EC2 内，当用户复制一个 AMI 时，新的 AMI 完全独立于源 AMI；与原始 (源) AMI 没有任何链接。AWS 不会将启动权限、用户定义的标签或 Amazon S3 存储桶权限从源 AMI 复制到新的 AMI。因此，在这种情况下，Stefano 默认将无法访问位于美国西部地区的 AMI。
参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/CopyingAMIs.html

正确答案: C
Amazon CloudWatch alarms watch a single metric over a time period that the user specifies and performs one or more actions based on the value of the metric relative to a given threshold over a number of time periods. The alarm has three states: Alarm, OK and Insufficient data. The Alarm will change to Insufficient Data when any of the three situations arise: when the alarm has just started, when the metric is not available or when enough data is not available for the metric to determine the alarm state. If the user wants to find that RDS is not available, he can setup to receive the notification when the state is in Insufficient data.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/AlarmThatSendsEmail.html

正确答案: C

Amazon CloudWatch警报监控用户指定时间段内的单个指标，并根据该指标相对于给定阈值在多个时间段内的值执行一个或多个操作。警报有三种状态：警报、正常和数据不足。当出现以下三种情况之一时，警报将更改为数据不足：警报刚启动时、指标不可用时或没有足够的数据可用于确定警报状态时。如果用户想确认RDS不可用，他可以设置在状态为数据不足时接收通知。

参考文献:

http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/AlarmThatSendsEmail.html

正确答案: A
VPC allows the user to set up a connection between his VPC and corporate or home network data centre. If the user has an IP address prefix in the VPC that overlaps with one of the networks’ prefixes, any traffic to the network’s prefix is dropped. In this case CIDR 20.0.54.0/24 falls in,the VPC’s CIDR range of 20.0.0.0/16. Thus, it will not allow traffic on that IP. In the case of 20.1.0.0/24, it does not fall in the VPC’s CIDR range. Thus, traffic will be allowed on it.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: A

VPC 允许用户在其 VPC 和公司或家庭网络数据中心之间建立连接。如果用户在 VPC 中具有与网络的某个前缀重叠的 IP 地址前缀，则任何指向网络前缀的流量都会被丢弃。在这种情况下，CIDR 20.0.54.0/24 属于 VPC 的 CIDR 范围 20.0.0.0/16。因此，它将不允许通过该 IP 的流量。对于 20.1.0.0/24，它不在 VPC 的 CIDR 范围内。因此，它的流量将被允许。

参考: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html

正确答案: A
AWS CloudWatch supports enabling the billing alarm on the total AWS charges. The estimated charges are calculated and sent several times daily to CloudWatch in the form of metric data. This data will be stored for 14 days. This data also includes the estimated charges for every service in AWS used by the user, as well as the estimated overall AWS charges. If the user wants to increase the limit, the user can modify the alarm and specify a new threshold.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/gs_monitor_estimated_charges_with_cloudwatch.html

正确答案: A

AWS CloudWatch 支持启用总 AWS 费用的计费警报。预计费用会计算并每天多次以指标数据的形式发送到 CloudWatch。这些数据将存储 14 天。该数据还包括用户使用的 AWS 中每项服务的预计费用，以及预计的整体 AWS 费用。如果用户想要提高限额，可以修改警报并指定一个新阈值。

参考:

http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/gs_monitor_estimated_charges_with_cloudwatch.html

正确答案: B
A user can create a subnet with VPC and launch instances inside that subnet. If the user has created a public private subnet, the instances in the public subnet can receive inbound traffic directly from the Internet, whereas the instances in the private subnet cannot. If these subnets are created with Wizard, AWS will create two route tables and attach to the subnets. The main route table will have the entry “Destination: 0.0.0.0/0 and Target: i-a12345”, which allows all the instances in the private subnet to connect to the internet using NAT.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html

正确答案: B

用户可以创建一个带有 VPC 的子网，并在该子网内启动实例。如果用户创建了一个公共私有子网，公共子网中的实例可以直接从互联网接收入站流量，而私有子网中的实例则不能。如果使用向导创建这些子网，AWS 将创建两个路由表并附加到这些子网。主路由表将包含条目“目的地: 0.0.0.0/0 和目标: i-a12345”，这允许私有子网中的所有实例使用 NAT 连接到互联网。

参考: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html

正确答案: A
Amazon Simple Notification Service (Amazon SNS) is a fast, flexible, and fully managed push messaging service. Amazon SNS can be used to make push notifications to mobile devices. Amazon SNS can deliver notifications by SMS text message or email to the Amazon Simple Queue Service (SQS) queues or to any HTTP endpoint. In this case user can use the SNS apis to send SMS.,Reference: http://aws.amazon.com/sns/

正确答案: A

Amazon Simple Notification Service (Amazon SNS) 是一种快速、灵活且完全托管的推送消息服务。Amazon SNS 可用于向移动设备发送推送通知。Amazon SNS 可以通过 SMS 短信或电子邮件将通知发送到 Amazon Simple Queue Service (SQS) 队列或任何 HTTP 端点。在这种情况下，用户可以使用 SNS API 发送 SMS。

参考: http://aws.amazon.com/sns/

正确答案: C
AWS EBS supports encryption of the volume. It also supports creating volumes from existing snapshots provided the snapshots are created from encrypted volumes. If the user is having data on an encrypted volume and is trying to share it with others, he has to copy the data from the encrypted volume to a new unencrypted volume. Only then can the user share it as an encrypted volume data. Otherwise the snapshot cannot be shared.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html

正确答案: C

AWS EBS 支持对卷进行加密。它还支持从现有快照创建卷，前提是快照是从加密卷创建的。如果用户在加密卷上有数据并试图与其他人共享，他必须将数据从加密卷复制到新的未加密卷。只有这样，用户才能将其作为加密卷数据共享。否则，快照无法共享。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html

正确答案: D
CloudWatch is used to monitor AWS as well as the custom services. To enable detailed instance monitoring for a new Auto Scaling group, the user does not need to take any extra steps. When the user creates the Auto Scaling launch config as the first step for creating an Auto Scaling group, each launch configuration contains a flag named InstanceMonitoring.Enabled. The default value of this flag is true. When the user has created a launch configuration with InstanceMonitoring.Enabled = false it will involve multiple steps to enable detail monitoring. The steps are:,Create a new Launch config with detailed monitoring enabled,Update the Auto Scaling group with a new launch config,Enable detail monitoring on each EC2 instance,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/as-metricscollected.html

正确答案: D

CloudWatch用于监控AWS以及自定义服务。要为新的自动扩展组启用详细的实例监控，用户不需要采取任何额外步骤。当用户以创建自动扩展组的第一步创建自动扩展启动配置时，每个启动配置都包含一个名为InstanceMonitoring.Enabled的标志。该标志的默认值为true。当用户创建了InstanceMonitoring.Enabled = false的启动配置时，将涉及多个步骤以启用详细监控。这些步骤如下：

• 创建一个新的启用详细监控的启动配置
• 使用新的启动配置更新自动扩展组
• 在每个EC2实例上启用详细监控

参考：http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/as-metricscollected.html

正确答案: D
Each AWS S3 bucket and object has an ACL (Access Control List) associated with it. An ACL is a list of grants identifying the grantee and the permission granted. The user can use ACLs to grant basic read/write permissions to other AWS accounts. ACLs use an Amazon S3–specific XML schema. The user cannot grant permissions to other users in his account. ACLs are suitable for specific scenarios. For example, if a bucket owner allows other AWS accounts to upload objects, permissions to these objects can only be managed using the object ACL by the AWS account that owns the object.,Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/S3_ACLs_UsingACLs.html

正确答案: D

每个 AWS S3 存储桶和对象都有一个与之关联的 ACL（访问控制列表）。ACL 是一个授权列表，识别受让人和所授予的权限。用户可以使用 ACL 向其他 AWS 账户授予基本的读/写权限。ACL 使用 Amazon S3 特定的 XML 架构。用户无法将权限授予他账户中的其他用户。ACL 适用于特定场景。例如，如果存储桶所有者允许其他 AWS 账户上传对象，则只能通过拥有该对象的 AWS 账户使用对象 ACL 来管理这些对象的权限。

参考: http://docs.aws.amazon.com/AmazonS3/latest/dev/S3_ACLs_UsingACLs.html

正确答案: C
The user can create subnets as per the requirement within a VPC. If the user wants to connect VPC from his own data centre, the user can setup a case with a VPN only subnet (private) which uses VPN access to connect with his data centre. When the user has configured this setup with Wizard, all network connections to the instances in the subnet will come from his data centre. The user has to configure the security group of the private subnet which allows the inbound traffic on SSH (port 22) from the data centre’s network range.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario4.html

正确答案: C

用户可以根据需要在VPC内创建子网。如果用户想要从自己的数据中心连接VPC，可以设置一个仅有VPN的子网（私有），该子网使用VPN访问与其数据中心连接。当用户使用向导配置此设置时，所有对子网中实例的网络连接将来自其数据中心。用户必须配置私有子网的安全组，以允许来自数据中心网络范围的SSH（端口22）入站流量。

参考: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario4.html

正确答案: A
AWS consolidated billing enables the organization to consolidate payments for multiple Amazon Web Services (AWS) accounts within a single organization by making a single paying account. Consolidated billing enables the organization to see a combined view of the AWS charges incurred by each account as well as obtain a detailed cost report for each of the individual AWS accounts associated with the paying account.,Reference:,http://docs.aws.amazon.com/awsaccountbilling/latest/about/consolidatedbilling.html

正确答案: A
AWS 联合计费使组织能够通过创建一个单一的支付账户，将多个 Amazon Web Services (AWS) 账户的支付合并到一个组织内。联合计费使组织能够看到每个账户产生的 AWS 费用的合并视图，并获取与支付账户相关的每个单独 AWS 账户的详细费用报告。
参考文献：
http://docs.aws.amazon.com/awsaccountbilling/latest/about/consolidatedbilling.html

正确答案: C
CloudWatch is used to monitor AWS as well as the custom services. It provides either basic or detailed monitoring for the supported AWS products. In basic monitoring, a service sends data points to CloudWatch every five minutes, while in detailed monitoring a service sends data points to CloudWatch every minute. To enable detailed instance monitoring for a new Auto Scaling group, the user does not need to take any extra steps. When the user creates an Auto Scaling launch config as the first step for creating an Auto Scaling group, each launch configuration contains a flag named InstanceMonitoring.Enabled. The default value of this flag is true. Thus, the user does not need to set this flag if he wants detailed monitoring.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/as-metricscollected.html

正确答案: C

CloudWatch 用于监控 AWS 以及自定义服务。它为支持的 AWS 产品提供基本或详细的监控。在基本监控中，服务每五分钟向 CloudWatch 发送数据点，而在详细监控中，服务每分钟向 CloudWatch 发送数据点。要为新的自动扩展组启用详细实例监控，用户无需采取任何额外步骤。当用户创建一个自动扩展启动配置作为创建自动扩展组的第一步时，每个启动配置都包含一个名为 InstanceMonitoring.Enabled 的标志。该标志的默认值为 true。因此，如果用户想要详细监控，则无需设置此标志。

参考文献: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/as-metricscollected.html

正确答案: B
A Virtual Private Cloud (VPC) is a virtual network dedicated to the user’s AWS account. AWS provides two features the user can use to increase security in VPC: security groups and network ACLs. Security groups work at the instance level while ACLs work at the subnet level. When a user creates a security group with AWS VPC, by default it will allow all the outbound traffic but block all inbound traffic.,Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario1.html

正确答案: B

虚拟私有云（VPC）是专门为用户的 AWS 账户而设的虚拟网络。AWS 提供了两个用户可以用来增强 VPC 安全性的功能：安全组和网络 ACL。安全组在实例级别工作，而 ACL 在子网级别工作。当用户在 AWS VPC 中创建一个安全组时，默认情况下将允许所有出站流量，但会阻止所有入站流量。

参考资料: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario1.html

正确答案: B
With AWS CloudWatch, the user can publish data points for a metric that share not only the same time stamp, but also the same namespace and dimensions. CloudWatch can accept multiple data points in the same PutMetricData call with the same time stamp. The only thing that the user needs to take care of is that the size of a PutMetricData request is limited to 8KB for HTTP GET requests and 40KB for HTTP POST requests.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.html

正确答案: B

使用 AWS CloudWatch，用户可以发布具有相同时间戳、相同命名空间和维度的指标数据点。CloudWatch 可以在同一个 PutMetricData 调用中接受具有相同时间戳的多个数据点。用户需要注意的一点是，PutMetricData 请求的大小对于 HTTP GET 请求限制为 8KB，对于 HTTP POST 请求限制为 40KB。

参考文献:

http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/cloudwatch_concepts.html

正确答案: B
With AWS IAM, a group is a collection of IAM users. A group allows the user to specify permissions for a collection of users, which can make it easier to manage the permissions for those users. A group helps an organization manage access in a better way; instead of applying at the individual level, the organization can apply at the group level which is applicable to all the users who are a part of that group.,Reference:,http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html

正确答案: B

使用 AWS IAM，组是 IAM 用户的集合。组允许用户为一组用户指定权限，这可以使管理这些用户的权限变得更加容易。组帮助组织以更好的方式管理访问；组织可以在组级别应用，而不是在个人级别，这适用于所有属于该组的用户。

参考文献:

http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html

正确答案: D
Amazon CloudWatch is basically a metrics repository. Either the user can send the custom data,or an AWS product can put metrics into the repository, and the user can retrieve the statistics based on those metrics. The statistics are metric data aggregations over specified periods of time. Aggregations are made using the namespace, metric name, dimensions, and the data point unit of measure, within the time period that is specified by the user. To aggregate the data across instances launched with AMI, the user should select the AMI ID under EC2 metrics and select the aggregate average to view the data.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/US_SingleMetricPerAMI.html

正确答案: D

Amazon CloudWatch 基本上是一个指标存储库。用户可以发送自定义数据，或者 AWS 产品可以将指标放入存储库中，用户可以根据这些指标检索统计数据。统计数据是在指定时间段内的指标数据聚合。

聚合是使用命名空间、指标名称、维度和数据点的度量单位在用户指定的时间段内进行的。要对使用 AMI 启动的实例进行数据聚合，用户应在 EC2 指标下选择 AMI ID，并选择聚合平均值以查看数据。

参考: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/US_SingleMetricPerAMI.html

正确答案: A
Auto Scaling based on a schedule allows the user to scale the application in response to predictable load changes. In this case the load increases by Thursday and decreases by Friday. Thus, the user can setup the scaling activity based on the predictable traffic patterns of the web application using Auto Scaling scale by Schedule.,Reference: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/schedule_time.html

正确答案: A
基于计划的自动扩展允许用户根据可预测的负载变化对应用程序进行扩展。在这种情况下，负载在星期四增加，在星期五减少。因此，用户可以利用基于计划的自动扩展，根据web应用程序的可预测流量模式设置扩展活动。
参考: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/schedule_time.html

正确答案: A
With AWS IAM a user is creating an application which runs on an EC2 instance and makes requests to AWS, such as DynamoDB or S3 calls. Here it is recommended that the user should not create an IAM user and pass the user’s credentials to the application or embed those credentials inside the application. Instead, the user should use roles for EC2 and give that role access to DynamoDB /S3. When the roles are attached to EC2, it will give temporary security credentials to the application hosted on that EC2, to connect with DynamoDB / S3.,Reference:,http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html

正确答案: A
使用AWS IAM，用户正在创建一个运行在EC2实例上的应用程序，该应用程序向AWS发出请求，例如DynamoDB或S3调用。在这里，建议用户不要创建IAM用户并将用户的凭证传递给应用程序或将这些凭证嵌入到应用程序中。相反，用户应该使用EC2角色，并授予该角色访问DynamoDB/S3的权限。当角色附加到EC2时，它将为在该EC2上托管的应用程序提供临时安全凭证，以便连接DynamoDB/S3。
参考: http://docs.aws.amazon.com/IAM/latest/UserGuide/Using_WorkingWithGroupsAndUsers.html

正确答案: D
If the user wants to delete the Auto Scaling group, the user should manually set the values of the minimum and desired capacity to 0. Otherwise Auto Scaling will not allow for the deletion of the group from CLI. While trying from the AWS console, the user need not set the values to 0 as the Auto Scaling console will automatically do so.,Reference: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/as-process-shutdown.html

正确答案: D
如果用户想要删除自动缩放组，用户应该手动将最小和期望容量的值设置为0。否则，自动缩放将不允许从CLI删除该组。在AWS控制台上进行尝试时，用户无需将值设置为0，因为自动缩放控制台会自动这样做。
参考: http://docs.aws.amazon.com/AutoScaling/latest/DeveloperGuide/as-process-shutdown.html

正确答案: C
AWS Glacier is an archival service offered by AWS. AWS S3 provides lifecycle rules to archive and restore objects from S3 to Glacier. Once the object is archived their storage class will change to Glacier. If the user sends a request for restore, the storage class will still be Glacier for the restored object. The user will be paying for both the archived copy as well as for the restored object. The object is available only for the duration specified in the restore request and if the user wants to modify that period, he has to raise another restore request with the updated duration.,Reference: http://docs.aws.amazon.com/AmazonS3/latest/dev/restoring-objects-console.html

正确答案: C

AWS Glacier 是 AWS 提供的一种归档服务。AWS S3 提供生命周期规则，以将对象从 S3 归档并恢复到 Glacier。一旦对象被归档，其存储类将更改为 Glacier。如果用户发出恢复请求，恢复的对象的存储类仍将是 Glacier。用户将为归档副本和恢复对象同时付费。该对象仅在恢复请求中指定的持续时间内可用，如果用户希望修改该时间段，则必须重新发起另一个带有更新持续时间的恢复请求。

参考: http://docs.aws.amazon.com/AmazonS3/latest/dev/restoring-objects-console.html

正确答案: D
Amazon Simple Notification Service (Amazon SNS) is a fast, flexible, and fully managed push messaging service. Amazon SNS can deliver notifications by SMS text message or email to the Amazon Simple Queue Service (SQS) queues or to any HTTP endpoint. The user can configure some sensor devices at his home which receives data on the HTTP end point (REST calls) and turn on the red light. The user can configure the CloudWatch alarm to send a notification to the AWS SNS HTTP end point (the sensor device) and it will turn the light red when there is an alarm condition.,Reference: http://aws.amazon.com/sns/

正确答案: D
亚马逊简单通知服务（Amazon SNS）是一种快速、灵活且完全托管的推送消息服务。亚马逊 SNS 可以通过 SMS 短信或电子邮件将通知发送到亚马逊简单队列服务（SQS）队列或任何 HTTP 终端。用户可以在家中配置一些传感器设备，这些设备通过 HTTP 端点接收数据（REST 调用）并打开红灯。用户可以配置 CloudWatch 警报，以向 AWS SNS HTTP 端点（传感器设备）发送通知，当发生警报条件时，它将把灯变为红色。
参考: http://aws.amazon.com/sns/

正确答案: B
CloudWatch is used to monitor AWS as the well custom services. For EC2 when the user is monitoring the EC2 instances, it will capture the 7 Instance level and 3 system check parameters for the EC2 instance. Since this is an EBS backed instance, it will not have ephermal storage attached to it. Out of the 7 EC2 metrics, the 4 metrics DiskReadOps, DiskWriteOps, DiskReadBytes and DiskWriteBytes are disk related data and available only when there is ephermal storage attached to an instance. For an EBS backed instance without any additional device, this data will be 0.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/ec2-metricscollected.html

正确答案: B

CloudWatch 用于监控 AWS 及其自定义服务。对于 EC2，当用户监控 EC2 实例时，将捕获 7 个实例级和 3 个系统检查参数。由于这是一个 EBS 支持的实例，因此不会附加临时存储。在 7 个 EC2 指标中，4 个指标 DiskReadOps、DiskWriteOps、DiskReadBytes 和 DiskWriteBytes 是与磁盘相关的数据，只有在实例附加临时存储时才会有这些数据。对于没有任何附加设备的 EBS 支持的实例，这些数据将为 0。

参考: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/ec2-metricscollected.html

正确答案: D
AWS EBS supports encryption of the volume. It also supports creating volumes from existing snapshots provided the snapshots are created from encrypted volumes. The data at rest, the I/O as well as all the snapshots of the encrypted EBS will also be encrypted. EBS encryption is based on the AES-256 cryptographic algorithm, which is the industry standard.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html

正确答案: D

AWS EBS 支持对卷进行加密。它还支持从现有快照创建卷，前提是这些快照是从加密卷创建的。静态数据、I/O 以及所有加密 EBS 的快照也将被加密。EBS 加密基于 AES-256 加密算法，这是行业标准。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html

正确答案: C
Amazon RDS uses the Amazon Simple Notification Service (SNS) to provide a notification when an Amazon RDS event occurs. These events can be configured for source categories, such as DB instance, DB security group, DB snapshot and DB parameter group.,Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.html

正确答案: C
Amazon RDS 使用 Amazon 简单通知服务 (SNS) 来提供 Amazon RDS 事件发生时的通知。这些事件可以根据源类别进行配置，例如 DB 实例、DB 安全组、DB 快照和 DB 参数组。
参考: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Events.html

正确答案: C
To launch an EC2 instance it is required to have an AMI in that region. If the AMI is not available in that region, then create a new AMI or use the copy command to copy the AMI from one region to the other region.,Reference: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/CopyingAMIs.html

正确答案: C

要启动一个 EC2 实例，必须在该区域有一个 AMI。如果在该区域没有 AMI，请创建一个新的 AMI 或使用复制命令将 AMI 从一个区域复制到另一个区域。

参考: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/CopyingAMIs.html

正确答案: D
Amazon CloudWatch alarm watches a single metric over a time period that the user specifies and performs one or more actions based on the value of the metric relative to a given threshold over a number of time periods. Alarms invoke actions only for sustained state changes. There are three states of the alarm: OK, Alarm and Insufficient data. In this case since the EBS is detached and inactive the state will be Insufficient.,Reference:,http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/AlarmThatSendsEmail.html

正确答案: D

Amazon CloudWatch 警报监控用户指定的时间段内的单个指标，并根据该指标相对于给定阈值的值在多个时间段内执行一个或多个操作。警报仅对持续的状态变化调用操作。警报有三种状态：正常、警报和数据不足。在这种情况下，由于 EBS 已脱离并且处于非活动状态，因此状态将是数据不足。

参考: http://docs.aws.amazon.com/AmazonCloudWatch/latest/DeveloperGuide/AlarmThatSendsEmail.html

正确答案: D
Generally AWS ELB routes each request to a zone with the minimum load. The Elastic Load Balancer provides a feature called sticky session which binds the user’s session with a specific EC2 instance. If the sticky session is enabled the first request from the user will be redirected to any of the EC2 instances. But, henceforth, all requests from the same user will be redirected to the same EC2 instance. This ensures that all requests coming from the user during the session will be sent to the same application instance.,Reference:,http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/US_StickySessions.html

正确答案: D

一般来说，AWS ELB会将每个请求路由到负载最小的可用区域。弹性负载均衡器提供了一种称为粘性会话的功能，该功能将用户的会话绑定到特定的EC2实例。如果启用粘性会话，则来自用户的第一个请求将被重定向到任何EC2实例。但从此之后，来自同一用户的所有请求都将被重定向到同一EC2实例。这确保了在会话期间，来自用户的所有请求都会发送到同一应用实例。

参考文献:

http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/US_StickySessions.html

正确答案: B
Amazon RDS performs maintenance on the DB instance during a user-definable maintenance window. The system may be offline or experience lower performance during that window. The only maintenance events that may require RDS to make the DB instance offline are:,Scaling compute operations,Softwarepatching. Required software patching is automatically scheduled only for patches that are security and durability related. Such patching occurs infrequently (typically once every few months) and seldom requires more than a fraction of the maintenance window.,Reference: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBMaintenance.html

正确答案: B

Amazon RDS 在用户定义的维护窗口期间对数据库实例进行维护。在该窗口期间，系统可能会离线或性能降低。可能需要 RDS 使数据库实例离线的唯一维护事件是：

• 扩展计算操作
• 软件修补

所需的软件修补仅会针对与安全性和耐用性相关的补丁进行自动调度。此类修补发生的频率很低（通常每几个月一次），并且很少需要超过维护窗口的一小部分时间。

参考: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBMaintenance.html

正确答案: C
AWS CloudWatch supports the custom metrics. The user can always capture the custom data and upload the data to CloudWatch using CLI or APIs. The user can publish the data to CloudWatch as single data points or as an aggregated set of data points called a statistic set using the command put-metric-data. When sending the aggregate data, the user needs to send it with the parameter statistic-values:,aws cloudwatch put-metric-data –metric-name –namespace –timestamp –statistic-values Sum=XX,Minimum=YY,Maximum=AA,SampleCount=BB –unit Milliseconds,Reference: http://docs.aws.amazon.com/cli/latest/reference/cloudwatch/put-metric-data.html

正确答案: C

AWS CloudWatch 支持自定义指标。用户可以随时捕获自定义数据，并使用 CLI 或 API 将数据上传到 CloudWatch。用户可以将数据作为单个数据点或作为一组聚合的数据点（称为统计集）发布到 CloudWatch，使用命令 put-metric-data。当发送聚合数据时，用户需要通过以下参数发送：statistic-values:，aws cloudwatch put-metric-data –metric-name –namespace –timestamp –statistic-values Sum=XX,Minimum=YY,Maximum=AA,SampleCount=BB –unit 毫秒，参考文档：http://docs.aws.amazon.com/cli/latest/reference/cloudwatch/put-metric-data.html